@3f-consulting/spec-controller-core 0.1.0-alpha.5 → 0.1.0-alpha.50

package/dist/domain/ledger.js

@@ -1,212 +1,41 @@
-/**
- * THE LEDGER — the accounts with their posted entries, co-located with its OWN whole-run
- * behaviour: `isBalanced`, `hasPendingItems`, `hasBrokenEvidence` (module, not class). These
- * three pure predicates are the whole-run verdict surface the CLI edge maps to exit codes;
- * they were the reconcile orchestration's exports and now live WITH the concept they fold over.
- */
-// The row-level static-check cut (3F-2203) — the Ledger-wide lint list is built ON it, so the
-// obligation-side rule is stated once, at the row.
 import { staticCheckReconciliationsOf, isScenario } from "./scenarioReconciliation.js";
-/**
- * The WHOLE-RUN verdict — is the ENTIRE reconciliation balanced? A pure domain
- * derivation over the WHOLE `Ledger`: balanced IFF NO reconciling
- * item exists ANYWHERE, across every Scenario Reconciliation row — scenario,
- * phantom, and suspense alike. Out-of-balance iff ANY row carries a reconciling
- * item: a scenario's out-of-balance items (failing / missing /
- * no-evidence-obligation / both-missing) AND the credit-side suspense/phantom rows (a
- * no-evidence-obligation static-check watermelon, an uncited credit, a phantom scenario).
- *
- * It is deliberately NOT a scan of scenario verdicts alone — that would
- * let a watermelon-only run (every scenario balanced, yet a no-evidence-obligation
- * static check sitting unreconciled in the suspense row) read as balanced, the
- * false pass a CI gate must never give. Every row's `reconcilingItems` is
- * consulted, so the suspense/phantom rows (verdict ALWAYS out-of-balance) count.
- *
- * The CLI edge maps this boolean to the process exit code — balanced → 0,
- * out-of-balance → EXACTLY 1 — an ENUMERATED status, never a count (a count would
- * 8-bit `& 0xFF` wrap → false pass).
- */
 export function isBalanced(reconciliation) {
     return reconciliation.scenarioReconciliations.every((row) => row.reconcilingItems.length === 0);
 }
-/**
- * Does the WHOLE reconciliation carry any Pending Item? A pure domain predicate over the
- * WHOLE `Ledger`, SYMMETRIC with `isBalanced` — together they are the
- * whole-run verdict surface. True iff ANY Scenario Reconciliation row carries a Pending
- * Item (a deferred `<quality-check>pending` obligation partitioned off before reconciliation,
- * @SCN-PND-004). Pending Items are run-neutral by default (@SCN-PND-008); the CLI edge
- * consults this ALONGSIDE `isBalanced` to escalate an otherwise-balanced run to the distinct
- * exit code 3 under `--strict` (@SCN-CLI-011) — an OPT-IN gate on deferred obligations,
- * checked only when `isBalanced` is true (out-of-balance dominates, exit 1).
- */
 export function hasPendingItems(reconciliation) {
     return reconciliation.scenarioReconciliations.some((row) => row.pendingItems.length > 0);
 }
-/**
- * Does the WHOLE reconciliation carry BROKEN evidence — i.e. is the run UNSOUND? The THIRD
- * whole-run predicate (@SCN-LDG-018), beside `isBalanced` and `hasPendingItems`, and the
- * EXISTENTIAL TWIN of the latter: the same `some(row => some(item => item.outcome === X))` scan.
- *
- * Soundness is a property of the RUN, not of a scenario. If any PROOF NEVER RAN — a vitest suite
- * that failed to collect (@SCN-LDG-017), or a cucumber step matched by two or more definitions
- * (@SCN-LDG-019) — the evidence never fully materialised, so every `missing` in that run is
- * SUSPECT: it may be a broken proof rather than an absent one, and the remedies differ (fix the
- * harness vs write a test). The scenario's own row stays honest at its own resolution (`missing`);
- * the RUN is what is stamped unsound.
- *
- * DERIVED, NEVER STORED — no soundness flag is written onto `Ledger`, the same
- * no-drift reason `isBalanced` and `hasPendingItems` derive. Machine consumers read soundness off
- * `summary.byOutcome.broken > 0` (type-forced into the JSON the moment `broken` joined the
- * `Outcome` union); the markdown renderer prints the HEADLINE word — "unsound" is the render word,
- * never the predicate's name, exactly as "out-of-balance" is for `isBalanced`.
- *
- * Keyed on the `broken` OUTCOME specifically, never on `!isBalanced`: an ordinary out-of-balance
- * run (an honest `missing`, no broken evidence) is perfectly SOUND. The three whole-run
- * predicates are INDEPENDENT — a run may carry Pending Items and be sound; a run may carry broken
- * evidence and no Pending Items. (A broken run is ALWAYS out-of-balance, since the `broken` item
- * sits on the suspense row — which is why the CLI edge must consult THIS predicate BEFORE the
- * balance verdict, @SCN-CLI-012, or its exit code would be unreachable.)
- */
 export function hasBrokenEvidence(reconciliation) {
     return brokenItemsOf(reconciliation).length > 0;
 }
-/**
- * Does the WHOLE run have NOTHING TO RECONCILE — no accounts at all? The FOURTH whole-run
- * predicate (@SCN-CLI-019), beside `isBalanced` / `hasPendingItems` / `hasBrokenEvidence`, and the
- * one shape the other three cannot speak about.
- *
- * THE FAULT IT EXISTS TO NAME. `isBalanced` is `.every()` over the rows, so on an EMPTY ledger it
- * is VACUOUSLY TRUE; `hasPendingItems` and `hasBrokenEvidence` are `.some()`, so they are
- * vacuously FALSE. A target that declared nothing and produced nothing therefore satisfied every
- * existing predicate in the direction that reads as a pass, and was told "BALANCED … (exit 0)" — a
- * green over silence, from the tool whose whole claim is that silence is not the same as nothing
- * wrong. No combination of the three separates an empty run from a clean one, which is why this is
- * a predicate and not a derivation of one.
- *
- * ITS OWN ENUMERATED STATE, exit 5 (taxonomy: 0 balanced / 1 out-of-balance / 2 usage / 3
- * pending-under-strict / 4 unsound / 5 nothing to reconcile). Not balanced — there are no accounts
- * to agree. Not out-of-balance — nothing disagrees. Not a usage fault — the invocation was valid
- * and `new-client` is a supported adoption state, not a degraded one. Not unsound — no proof
- * failed; none was owed.
- *
- * KEYED ON THE EMPTY LEDGER, NEVER ON THE EMPTY CORPUS, and that is load-bearing rather than
- * pedantic: a target with no corpus but uncited credits HAS a row — its suspense row — and is an
- * ordinary out-of-balance report at exit 1 (@SCN-CLI-020). Keyed on "no corpus" instead, the modal
- * first run's whole report would disappear behind exit 5.
- *
- * DERIVED, NEVER STORED — no emptiness flag is written onto `Ledger`, the same no-drift reason its
- * three siblings derive, and the reason no JSON-schema change is owed: a machine consumer reads
- * the row count off the ledger it already has. The markdown renderer prints the HEADLINE word —
- * "NOTHING TO RECONCILE" is the render word, never the predicate's name, exactly as "unsound" is
- * for `hasBrokenEvidence`.
- *
- * WHERE IT MUST BE ASKED, MEASURED RATHER THAN ARGUED (3F-3344). The ticket predicted this would
- * be @SCN-CLI-012's pre-emption one code further on — ask it after `isBalanced` and the branch
- * goes unreachable. IT IS NOT, and the plant that was supposed to prove it stayed GREEN. An empty
- * ledger is MUTUALLY EXCLUSIVE with all three siblings: with no rows there is no row to carry a
- * broken item, a reconciling item or a Pending Item, so it fires NONE of them and its position
- * AMONG them is unobservable. Moving it below `!isBalanced` in the CLI ladder still exits 5
- * (measured).
- *
- * WHAT IS LOAD-BEARING is its position against the chain's DEFAULT. "Balanced" is not a predicate
- * branch — it is the fall-through — so there is no "after the balanced case" to append a fifth
- * code to, and a chain that reaches its default has already called the run balanced. Appended
- * after the default the branch is dead code and the run exits 0 (measured: the plant that DID red).
- * That is also why the fault survived: a fifth code cannot be ADDED to this chain, it has to
- * DISPLACE the default, and nothing about the other three predicates says so.
- */
 export function hasNothingToReconcile(reconciliation) {
     return reconciliation.scenarioReconciliations.length === 0;
 }
-/**
- * The BROKEN reconciling items across the WHOLE run (3F-2203) — every proof that never ran, in row
- * order, each carrying its WHERE-to-fix (locator) and WHAT-broke (the runner's message).
- *
- * The QUANTITATIVE twin of `hasBrokenEvidence`, which is now derived FROM it: "is this run
- * unsound?" and "which proofs never ran?" are one question at two resolutions, so they are one
- * scan. The markdown's Run-integrity section listed these by re-deriving the scan itself — a model
- * query living in the renderer, and a second statement of which outcome means broken.
- *
- * The renderer READS this list and takes its length for the count-phrase; asking a list you were
- * given how long it is is projection, not derivation.
- */
 export function brokenItemsOf(reconciliation) {
     return reconciliation.scenarioReconciliations.flatMap((row) => row.reconcilingItems.filter((item) => item.outcome === "broken"));
 }
-/**
- * The OBLIGATION-SIDE static-check sub-rows across the whole Ledger (3F-2203) — each `lint` Quality
- * Check Reconciliation with the scnId of the row that names it, in row-then-document order.
- *
- * SCENARIO ROWS ONLY. A `lint` obligation is obligation-side, so a phantom or suspense row can carry
- * none; the suspense row's lint CREDIT (a no-evidence-obligation static check, `cites-no-scenario`) is an
- * observation, not an obligation, and must never inflate the obligation-side lint total.
- *
- * ONE COPY, BY CONSTRUCTION. That scenario-rows-only filter plus the lint cut existed TWICE,
- * character-identical — here in `lintTally` and in the markdown's `### Lint evidence obligations`
- * table. They agreed by copy-paste, not construction: either could have grown a clause alone and
- * nothing would have redded. Same anaemia, same cure as `evidenceObligationPairsOf` and
- * the corpus's own fitness obligations; the tally and the table are now two readings of ONE list.
- */
-export function lintReconciliationsOf(reconciliation) {
+export function fitnessReconciliationsOf(reconciliation) {
     return reconciliation.scenarioReconciliations
         .filter(isScenario)
         .flatMap((row) => staticCheckReconciliationsOf(row).map((r) => ({ scnId: row.scnId, reconciliation: r })));
 }
-/** The canonical quality-check subject order (lint first, then the runtime quality-checks). */
-const QUALITY_CHECK_ORDER = ["lint", "unit", "integration", "e2e", "performance"];
-/**
- * Tally the LEDGER-PURE summary totals from the balance — the aggregate the markdown's
- * trial-balance table derives, carried AS DATA so a later render-from-saved-JSON rebuilds it with
- * zero computation (the MATERIALISE ruling). The census pass-throughs (`testVolume`,
- * `staticChecks`) are not Ledger-pure and are merged in by the assembler.
- */
+const QUALITY_CHECK_ORDER = ["fitness", "unit", "integration", "e2e", "performance"];
 export function ledgerTally(balance) {
     const { scenarioReconciliations, pending } = scenarioReconciliationTally(balance);
     return {
         scenarioReconciliations,
         evidenceObligations: evidenceObligationTotals(balance),
-        // The Pending Items tally (@SCN-PND-011) — its OWN summary count, SEPARATE from the
-        // scenario verdict counts and the evidence-obligation counts. A Pending Item is deferred,
-        // not out-of-balance, so it is never one of the `OUT_OF_BALANCE_OUTCOMES` (never a `byOutcome`
-        // leaf of its own, at any leaf count). Always present (a pure balance derive, like `lint`);
-        // reads 0 when no scenario raises a pending obligation.
         pending,
-        // The static-only lint tally (RMD-005) — replicates markdown's `countStaticEvidenceObligations`
-        // (static evidenceObligations balanced / total). Always present (a pure balance derive); `byOutcome`
-        // is kind-agnostic and cannot evidenceObservations this static-only cut.
-        lint: lintTally(balance),
+        fitness: fitnessTally(balance),
     };
 }
-/**
- * The row-level half of `ledgerTally` — the Scenario Reconciliation verdict totals and the
- * Pending Items count, both read off one pass over the rows.
- */
 function scenarioReconciliationTally(balance) {
-    // The headline verdict tally counts EVERY Scenario Reconciliation (@SCN-RMD-001, 3F-1724):
-    // the summary is the totals over ALL rows (double-entry-manifesto), and phantom / suspense
-    // reconciliations are ALWAYS out-of-balance, so they count into the tally like any other row.
-    // `phantom` / `suspense` are kept as SUB-COUNTS — a breakdown OF the total, not a bucket
-    // outside it. (The retracted "ruling Q3" tallied scenario rows only, which is what let the
-    // tally read 0 out-of-balance on a run `isBalanced` correctly failed → exit 1: 3F-1703.)
     const verdict = { balanced: 0, "out-of-balance": 0 };
     let phantom = 0;
     let suspense = 0;
-    // The Pending Items tally (@SCN-PND-011) — the count of Pending Items across the
-    // reconciliation, one per deferred `<quality-check>pending` obligation. Counts ITEMS, not
-    // scenarios-carrying-pending (a scenario may raise several), mirroring the out-of-balance
-    // decomposition, which counts obligations, not scenarios. A Pending Item is a structurally
-    // distinct category (never a reconciling item / evidence obligation), so it is tallied
-    // SEPARATELY here — never folded into `byOutcome` (the out-of-balance leaves).
     let pending = 0;
     for (const s of balance.scenarioReconciliations) {
-        // Pending Items ride every row's `pendingItems` (only scenario rows carry them; a
-        // phantom / suspense row has none — as an EMPTY array, never an absent one), so the tally is
-        // a plain sum across all rows. `pendingItems` is required on `ScenarioReconciliation`, so
-        // there is no absent case to fall back from; `hasPendingItems` above already reads it bare.
         pending += s.pendingItems.length;
-        // The kind sub-counts, tallied ALONGSIDE the verdict (never instead of it) — the row still
-        // falls through to the verdict tally below, so a phantom / suspense reconciliation counts
-        // into `total` and (being always out-of-balance) into `outOfBalance`.
         if (s.kind === "phantom-scenario")
             phantom++;
         if (s.kind === "suspense-scenario")
@@ -215,25 +44,16 @@ function scenarioReconciliationTally(balance) {
     }
     return {
         scenarioReconciliations: {
-            // Every row's verdict is tallied, so this IS the count of all Scenario Reconciliations
-            // (scenario + phantom + suspense) — the manifesto's "the summary is the totals".
             total: verdict.balanced + verdict["out-of-balance"],
             balanced: verdict.balanced,
             outOfBalance: verdict["out-of-balance"],
-            // Sub-counts: a breakdown OF the totals above (scenario = total − phantom − suspense).
             phantom,
             suspense,
         },
         pending,
     };
 }
-/**
- * The obligation-level half of `ledgerTally` — every Quality Check Reconciliation tallied by
- * outcome, with the `missing` ones split by quality-check.
- */
 function evidenceObligationTotals(balance) {
-    // byOutcome tallies EVERY Quality Check Reconciliation across ALL rows (scenario AND
-    // phantom), so `cites-unknown-scenario` reflects the real phantom count.
     const byOutcome = {
         satisfied: 0,
         "missing": 0,
@@ -241,28 +61,16 @@ function evidenceObligationTotals(balance) {
         "watermelon": 0,
         "cites-unknown-scenario": 0,
         "cites-no-scenario": 0,
-        // The debit twin of cites-no-scenario (@SCN-LDG-021) — a scenario with no @SCN code to link.
         "no-scn-code": 0,
-        // The broken reconciling item — a proof that NEVER RAN: a vitest suite that failed to collect
-        // (@SCN-LDG-017), or a cucumber step matched by two or more definitions (@SCN-LDG-019). A
-        // machine consumer reads run-soundness off this count: `byOutcome.broken > 0` ⇒ any `missing`
-        // in the run may be a BROKEN proof rather than an absent one.
+        "duplicate-scn-code": 0,
         "broken": 0,
-        // The no-evidence-obligation reconciling item (@SCN-LDG-008) — a credit citing a real
-        // scenario at a quality-check it never named. Shown here so a reader sees it break out of
-        // the reconciliation-matched-attributed count (ruling Q1).
         "no-evidence-obligation": 0,
-        // The both-missing reconciling item (@SCN-LDG-009) — the NEITHER-side outcome:
-        // a scenario reconciling to zero rows on both sides. `byOutcome` is now 8-valued.
         "both-missing": 0,
     };
     const missing = new Map();
     for (const s of balance.scenarioReconciliations) {
         for (const o of s.qualityCheckReconciliations) {
             byOutcome[o.outcome]++;
-            // The subject IS the flat quality-check — `lint` or a runtime quality-check. The
-            // both-missing item carries no quality-check (it is not a `missing` evidence obligation), so the
-            // guard both narrows the type and keeps it out of the missing split.
             if (o.outcome === "missing" && o.qualityCheck) {
                 missing.set(o.qualityCheck, (missing.get(o.qualityCheck) ?? 0) + 1);
             }
@@ -276,60 +84,14 @@ function evidenceObligationTotals(balance) {
         missingByQualityCheck: QUALITY_CHECK_ORDER.filter((s) => (missing.get(s) ?? 0) > 0).map((subject) => ({ subject, count: missing.get(subject) })),
     };
 }
-/**
- * The static-only lint tally (RMD-005) — how many `@lint` (static) evidence obligations reconcile
- * satisfied (`balanced`), out of the total raised. Byte-for-byte the markdown's
- * `countStaticEvidenceObligations` (`src/render/markdown.ts`), so slice 2 can read `satisfied` / `total`
- * with zero byte change. `summary.byOutcome` counts ALL kinds, so the static-only total is derived
- * here explicitly.
- */
-export function lintTally(balance) {
-    // TWO READINGS OF ONE LIST (3F-2203) — the obligation-side lint sub-rows come from
-    // `lintReconciliationsOf`, the same list the markdown's lint table renders. The
-    // scenario-rows-only cut lives there, once, so the tally and the table cannot disagree.
-    const lint = lintReconciliationsOf(balance);
+export function fitnessTally(balance) {
+    const fitness = fitnessReconciliationsOf(balance);
     return {
-        satisfied: lint.filter(({ reconciliation }) => reconciliation.outcome === "satisfied").length,
-        total: lint.length,
+        satisfied: fitness.filter(({ reconciliation }) => reconciliation.outcome === "satisfied").length,
+        total: fitness.length,
     };
 }
-// ---------------------------------------------------------------------------
-// THE RUNTIME-OBSERVATION TALLY (3F-2102, Read @SCN-RMD-003) — the credit-side
-// headline the report's `### Test volume` cut derives, a FOLD OVER THE LEDGER co-located here
-// beside `ledgerTally` for the same reason: "the summary is the totals" — the Ledger counts its
-// OWN posted credits because it IS the balance. This RETIRES the runtime evidence-observation
-// census (`census/evidenceObservations.ts`): "census" and "collection of evidence observations"
-// are not manifesto concepts, so the counting folds onto the Ledger rather than living in a
-// parallel store. Only the AGGREGATE headlines survive (the raw per-quality-check totals and the
-// per-scenario-kind counts) — the per-`(scnId, quality-check)` `attributed[]` list did not, being
-// a re-representation of the Ledger's own posted credits (retire, don't relocate).
-// ---------------------------------------------------------------------------
-/** The canonical runtime quality-check order, in reading order. */
 export const RUNTIME_QUALITY_CHECKS = ["unit", "integration", "e2e", "performance"];
-/**
- * Tally the runtime evidence observations from the Ledger — a FOLD OVER THE POSTED CREDITS
- * (@SCN-RMD-003), the credit-side twin of `ledgerTally`'s debit-side fold. It walks the POSTED
- * CREDITS on each Scenario Reconciliation row (@SCN-LDG-022) and reads each credit's account off
- * THE ROW IT POSTED TO — a scenario row ⇒ `onScenario`, a phantom row ⇒ `onPhantomScenario`,
- * the suspense row ⇒ `onSuspenseScenario` — summing the raw per-quality-check total in lockstep.
- *
- * It RE-DERIVES NOTHING and it does NOT classify: the reconciler already decided which account
- * every credit posts to (the account IS the citation, @SCN-LDG-022), so asking the row is asking
- * that decision. There is ONE place that decides what a credit is, so this tally can never disagree
- * with the verdict — the views (Test volume, the per-quality-check table) are projections of the
- * same rows, not a parallel opinion kept in step.
- *
- * Static check (`lint`) credits are SKIPPED, ON THE CHECK and never on the absence of a citation
- * (@SCN-RPT-023). A fitness credit now CITES its own scenario and posts to an ordinary
- * scenario row, so to a naive walk it is indistinguishable from a runtime credit by the account it
- * landed on; the `qualityCheck` is the only thing that tells them apart. Counting one would fold
- * the static axis into the Test volume, which must not see it at all.
- *
- * The per-scenario-kind counts feed `summary.testVolume` directly (`onScenario` counts credits
- * citing a scenario, INCLUDING no-evidence-obligation — so the 3-termed identity
- * `total = onScenario + onPhantomScenario + onSuspenseScenario` holds); `rawByRuntimeQualityCheck`
- * is the re-homed per-quality-check headline the by-level table renders.
- */
 export function runtimeObservationTally(ledger) {
     const rawByRuntimeQualityCheck = {
         unit: 0,
@@ -340,13 +102,9 @@ export function runtimeObservationTally(ledger) {
     let onScenario = 0;
     let onPhantomScenario = 0;
     let onSuspenseScenario = 0;
-    // THE FOLD (@SCN-RMD-003). Walk the POSTED CREDITS and read each credit's ACCOUNT off the row it
-    // posted to — the reconciler's own ruling, never re-classified here.
     for (const row of ledger.scenarioReconciliations) {
         for (const obs of row.evidenceObservations) {
-            // THE RUNTIME SCOPING — a static check credit rides the `lint` quality-check and is not a
-            // runtime observation, so it is not counted (see the docstring).
-            if (obs.qualityCheck === "lint")
+            if (obs.qualityCheck === "fitness")
                 continue;
             rawByRuntimeQualityCheck[obs.qualityCheck]++;
             if (row.kind === "phantom-scenario")
@@ -357,83 +115,19 @@ export function runtimeObservationTally(ledger) {
                 onScenario++;
         }
     }
-    // THE COMPLETENESS IDENTITY — `Σ raw = onScenario + onPhantomScenario + onSuspenseScenario` —
-    // holds BY CONSTRUCTION: the single walk above increments a per-quality-check counter and exactly
-    // one per-scenario-kind counter in the SAME iteration, so the two sides cannot diverge. It is
-    // COMPLETENESS ONLY: invariant under a misfile BETWEEN its own terms, so it catches a credit
-    // VANISHING, never a credit in the wrong account (the `@SCN`s and the rows are that).
-    //
-    // THE RUNTIME `throw` THAT STOOD HERE IS GONE (3F-2231). It could not fire — both sides move
-    // together in one loop — so it was dead code asserting an invariant the structure already
-    // guarantees, which is precisely the scar-tissue shape `why-ddd-for-spec-controller.md` names as
-    // the anemic tell ("kept honest by hand-written identity assertions"); the goal is that summing
-    // the wrong rows "stops being POSSIBLE, not merely asserted-against". The invariant is not
-    // unguarded by its removal: `runtimeObservationTally.test.ts` pins it over a spanning corpus,
-    // which is where an invariant belongs. If this fold is ever split into two walks the identity
-    // becomes a real risk again — and that test, not a throw in a pure function, is what will red.
     const total = RUNTIME_QUALITY_CHECKS.reduce((n, qc) => n + rawByRuntimeQualityCheck[qc], 0);
     return { rawByRuntimeQualityCheck, total, onScenario, onPhantomScenario, onSuspenseScenario };
 }
-/**
- * Tally the static-check observations from the Ledger — a FOLD OVER THE POSTED static-check CREDITS
- * (3F-2118), the static-axis twin of `runtimeObservationTally`. It walks the POSTED CREDITS on each
- * Scenario Reconciliation row (@SCN-LDG-022), reads each credit off THE ROW IT POSTED TO, and — like
- * its runtime sibling — RE-DERIVES NOTHING: the reconciler already decided which account every credit
- * posts to, so this can never disagree with the verdict.
- *
- * `uncitedStaticCheckCount` is the count of RUNNING lint credits on the SUSPENSE row — the
- * no-evidence-obligation static checks the reconciler folded there (a static check running with no
- * scenario citing it, `cites-no-scenario` on the credit side). THE RUNNING QUALIFIER IS ENFORCED
- * HERE AND IS NO LONGER FREE (@SCN-LNT-033). It used to be a plain count, and the sentence in this
- * place said that by construction the app pushes only RUNNING checks into that stream
- * (`runningStaticChecks`), so every suspense lint credit was running. `@SCN-LNT-032` falsified
- * that: the same stream now carries a check whose red its job swallows, which is pushed into it and
- * is not running. So the filter below applies to BOTH counts, and the invariant the old sentence
- * asserted is the one this fold now MAKES TRUE. A BROKEN credit reaches the same row by a different
- * route (@SCN-LNT-026) and is excluded: it is a check a scenario DID name, which did not run.
- *
- * `runningStaticCheckCount` is the count of RUNNING lint credits across ALL rows. One care-move the
- * runtime axis does not need (see the block comment above):
- *   - FILTER TO RUNNING (`exists && enforcedOverRealSource`): a watermelon (exists, unwired), a
- *     severed (wired, and the job's verdict does not depend on it) or a missing (absent) check
- *     STILL posts (posting is not classifying), but it does not RUN over the real source as a gate,
- *     so it is not a running static check — excluded here exactly as the retired census's
- *     running-only `continue` excluded it.
- *
- * The named (implicit) count is `runningStaticCheckCount − uncitedStaticCheckCount`, and it cannot
- * go below nil: the uncited count is drawn from inside the running one.
- */
 export function staticObservationTally(ledger) {
-    // The RUNNING static-check credits across ALL rows. Only running checks
-    // (`exists && enforcedOverRealSource`) are counted — a watermelon/missing check, which posts but
-    // does not run, is filtered out (the census's running-only `continue`).
     let runningStaticCheckCount = 0;
-    // The uncited static checks — the RUNNING lint credits the reconciler folded onto the SUSPENSE
-    // row (a no-evidence-obligation running check, `cites-no-scenario`). Not a plain count of that
-    // row's lint credits: the no-evidence-obligation stream also carries a check the job's verdict
-    // does not depend on, which is pushed into it and is not running (@SCN-LNT-033).
     let uncitedStaticCheckCount = 0;
     for (const row of ledger.scenarioReconciliations) {
         for (const obs of row.evidenceObservations) {
-            // THE STATIC SCOPING — only static-check credits ride the `lint` quality-check; a runtime
-            // credit (the uncited/broken ones the suspense row also holds) is not a static observation.
-            if (obs.qualityCheck !== "lint")
+            if (obs.qualityCheck !== "fitness")
                 continue;
-            // A BROKEN CREDIT IS NEITHER COUNT (@SCN-LNT-026). It reaches the suspense row for a reason
-            // the uncited count does not name: the check DID have a scenario naming it, and it did not
-            // run. Counting it as uncited would report a check nobody named, sending the reader to write
-            // an obligation that is already written — the misdirection the `broken` outcome exists to
-            // avoid. It is not a running static check either, and `exists` reads false so the clause
-            // below already says so; this one is what keeps the sentence true rather than incidental.
             if (obs.broken === true)
                 continue;
-            // ONE MEMBERSHIP RULE, NESTED RATHER THAN REPEATED (@SCN-LNT-033). The uncited count is the
-            // running count's suspense-row SUBSET, so the two cannot be given different rules by a later
-            // edit to one of them, and the figure a reader takes from the pair — `running − uncited`,
-            // the named count neither of them prints — cannot go below nil. Two sibling `if`s reading
-            // the same credit under different conditions is exactly the arrangement that let a severed
-            // uncited check leave one count and stay in the other.
-            if (!obs.exists || !obs.enforcedOverRealSource)
+            if (!obs.exists)
                 continue;
             runningStaticCheckCount++;
             if (row.kind === "suspense-scenario")

package/dist/domain/ledger.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/domain/ledger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,8FAA8F;AAC9F,mDAAmD;AACnD,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAuCvF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,UAAU,CAAC,cAAsB;IAC/C,OAAO,cAAc,CAAC,uBAAuB,CAAC,KAAK,CACjD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,cAAsB;IACpD,OAAO,cAAc,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,iBAAiB,CAAC,cAAsB;IACtD,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,OAAO,cAAc,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,cAAsB;IAClD,OAAO,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5D,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACnC,cAAsB;IAEtB,OAAO,cAAc,CAAC,uBAAuB;SAC1C,MAAM,CAAC,UAAU,CAAC;SAClB,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,4BAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CACxF,CAAC;AACN,CAAC;AA2FD,+FAA+F;AAC/F,MAAM,mBAAmB,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAErG;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO;QACL,uBAAuB;QACvB,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACtD,oFAAoF;QACpF,0FAA0F;QAC1F,+FAA+F;QAC/F,4FAA4F;QAC5F,wDAAwD;QACxD,OAAO;QACP,gGAAgG;QAChG,qGAAqG;QACrG,yEAAyE;QACzE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,2BAA2B,CAAC,OAAe;IAIlD,2FAA2F;IAC3F,2FAA2F;IAC3F,8FAA8F;IAC9F,yFAAyF;IACzF,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,OAAO,GAAkD,EAAE,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IACpG,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,iFAAiF;IACjF,0FAA0F;IAC1F,0FAA0F;IAC1F,2FAA2F;IAC3F,uFAAuF;IACvF,+EAA+E;IAC/E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAChD,kFAAkF;QAClF,6FAA6F;QAC7F,0FAA0F;QAC1F,4FAA4F;QAC5F,OAAO,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QACjC,2FAA2F;QAC3F,0FAA0F;QAC1F,sEAAsE;QACtE,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;YAAE,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO;QACL,uBAAuB,EAAE;YACvB,uFAAuF;YACvF,iFAAiF;YACjF,KAAK,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACnD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC;YACvC,uFAAuF;YACvF,OAAO;YACP,QAAQ;SACT;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,qFAAqF;IACrF,yEAAyE;IACzE,MAAM,SAAS,GAA4B;QACzC,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,wBAAwB,EAAE,CAAC;QAC3B,mBAAmB,EAAE,CAAC;QACtB,6FAA6F;QAC7F,aAAa,EAAE,CAAC;QAChB,8FAA8F;QAC9F,0FAA0F;QAC1F,8FAA8F;QAC9F,8DAA8D;QAC9D,QAAQ,EAAE,CAAC;QACX,sFAAsF;QACtF,0FAA0F;QAC1F,2DAA2D;QAC3D,wBAAwB,EAAE,CAAC;QAC3B,+EAA+E;QAC/E,kFAAkF;QAClF,cAAc,EAAE,CAAC;KAClB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,CAAC;YAC9C,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,iFAAiF;YACjF,iGAAiG;YACjG,qEAAqE;YACrE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO;QACL,KAAK;QACL,SAAS;QACT,YAAY,EAAE,KAAK,GAAG,SAAS,CAAC,SAAS;QACzC,qBAAqB,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACrF,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,EAAE,CAAC,CACzD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,mFAAmF;IACnF,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,MAAM;QAC7F,KAAK,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,8FAA8F;AAC9F,gGAAgG;AAChG,8FAA8F;AAC9F,gGAAgG;AAChG,4FAA4F;AAC5F,iGAAiG;AACjG,kGAAkG;AAClG,mFAAmF;AACnF,8EAA8E;AAE9E,mEAAmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAmCpH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,wBAAwB,GAAwC;QACpE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC;QACd,GAAG,EAAE,CAAC;QACN,WAAW,EAAE,CAAC;KACf,CAAC;IACF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,iGAAiG;IACjG,qEAAqE;IACrE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC3C,0FAA0F;YAC1F,iEAAiE;YACjE,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM;gBAAE,SAAS;YAC1C,wBAAwB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB;gBAAE,iBAAiB,EAAE,CAAC;iBACpD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;gBAAE,kBAAkB,EAAE,CAAC;;gBAC3D,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,kGAAkG;IAClG,8FAA8F;IAC9F,6FAA6F;IAC7F,sFAAsF;IACtF,EAAE;IACF,6FAA6F;IAC7F,0FAA0F;IAC1F,iGAAiG;IACjG,gGAAgG;IAChG,2FAA2F;IAC3F,8FAA8F;IAC9F,8FAA8F;IAC9F,+FAA+F;IAC/F,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,wBAAwB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5F,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;AAChG,CAAC;AA4DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,wEAAwE;IACxE,iGAAiG;IACjG,wEAAwE;IACxE,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,+FAA+F;IAC/F,+FAA+F;IAC/F,+FAA+F;IAC/F,iFAAiF;IACjF,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC3C,0FAA0F;YAC1F,4FAA4F;YAC5F,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM;gBAAE,SAAS;YAC1C,4FAA4F;YAC5F,2FAA2F;YAC3F,6FAA6F;YAC7F,0FAA0F;YAC1F,yFAAyF;YACzF,0FAA0F;YAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAClC,4FAA4F;YAC5F,6FAA6F;YAC7F,0FAA0F;YAC1F,0FAA0F;YAC1F,2FAA2F;YAC3F,uDAAuD;YACvD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,sBAAsB;gBAAE,SAAS;YACzD,uBAAuB,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;gBAAE,uBAAuB,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/domain/ledger.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAOvF,MAAM,UAAU,UAAU,CAAC,cAAsB;IAC/C,OAAO,cAAc,CAAC,uBAAuB,CAAC,KAAK,CACjD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,cAAsB;IACpD,OAAO,cAAc,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,cAAsB;IACtD,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,OAAO,cAAc,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,cAAsB;IAClD,OAAO,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5D,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,cAAsB;IAEtB,OAAO,cAAc,CAAC,uBAAuB;SAC1C,MAAM,CAAC,UAAU,CAAC;SAClB,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,4BAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CACxF,CAAC;AACN,CAAC;AAkCD,MAAM,mBAAmB,GAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAExG,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO;QACL,uBAAuB;QACvB,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACtD,OAAO;QACP,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAe;IAIlD,MAAM,OAAO,GAAkD,EAAE,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IACpG,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;YAAE,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO;QACL,uBAAuB,EAAE;YACvB,KAAK,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACnD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC;YACvC,OAAO;YACP,QAAQ;SACT;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,SAAS,GAA4B;QACzC,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,wBAAwB,EAAE,CAAC;QAC3B,mBAAmB,EAAE,CAAC;QACtB,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,CAAC;QACvB,QAAQ,EAAE,CAAC;QACX,wBAAwB,EAAE,CAAC;QAC3B,cAAc,EAAE,CAAC;KAClB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,CAAC;YAC9C,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO;QACL,KAAK;QACL,SAAS;QACT,YAAY,EAAE,KAAK,GAAG,SAAS,CAAC,SAAS;QACzC,qBAAqB,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACrF,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,EAAE,CAAC,CACzD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,MAAM;QAChG,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAUpH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,wBAAwB,GAAwC;QACpE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC;QACd,GAAG,EAAE,CAAC;QACN,WAAW,EAAE,CAAC;KACf,CAAC;IACF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;gBAAE,SAAS;YAC7C,wBAAwB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB;gBAAE,iBAAiB,EAAE,CAAC;iBACpD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;gBAAE,kBAAkB,EAAE,CAAC;;gBAC3D,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,wBAAwB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5F,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;AAChG,CAAC;AAOD,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;gBAAE,SAAS;YAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAClC,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,SAAS;YAC1B,uBAAuB,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;gBAAE,uBAAuB,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,CAAC;AAC9D,CAAC"}

package/dist/domain/outcome.d.ts

@@ -0,0 +1,3 @@
+export type Outcome = "satisfied" | "failing" | "watermelon" | "missing" | "cites-unknown-scenario" | "cites-no-scenario" | "broken" | "no-evidence-obligation" | "no-scn-code" | "duplicate-scn-code" | "both-missing";
+export type SidePresence = "Exists" | "None";
+//# sourceMappingURL=outcome.d.ts.map

package/dist/domain/outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.d.ts","sourceRoot":"","sources":["../../src/domain/outcome.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GACf,WAAW,GACX,SAAS,GACT,YAAY,GACZ,SAAS,GACT,wBAAwB,GACxB,mBAAmB,GACnB,QAAQ,GACR,wBAAwB,GACxB,aAAa,GACb,oBAAoB,GACpB,cAAc,CAAC;AACnB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC"}

package/dist/domain/outcome.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=outcome.js.map

package/dist/domain/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../src/domain/outcome.ts"],"names":[],"mappings":""}

package/dist/domain/posting.d.ts

@@ -1,70 +1,14 @@
-/**
- * POSTING — the rule for WHERE an entry lands. Canon gives Posting its own glossary group
- * (`strategy/double-entry-manifesto.md`, "### Posting") beside Journal, Ledger and Reconciling,
- * and this module is that group's home (module, not class), co-locating the destination type with
- * the pure rule that decides it.
- *
- * It sits BETWEEN the journal and the Ledger, which is why it is neither's: `domain/ledger` folds
- * over an ASSEMBLED Ledger, and the posting rule runs BEFORE a Ledger exists; `domain/journal`
- * owns the entry types and what a scenario NAMES. Posting reads both sides and yields the row an
- * entry lands on. (3F-2202 — extracted from the `reconcile` fold, which decided this inline.)
- *
- * ONE CLAUSE, OVER BOTH AXES (3F-2590). THE CREDIT CITES. A test carries `@SCN-XXX`; a fitness
- * check's run carries the `@SCN` of the fitness scenario that raises its obligation. So
- * one credit names one scenario and posts to EXACTLY ONE row, and a credit posting to no real
- * scenario is PHANTOM (its `@SCN` matches no scenario) or SUSPENSE (it cites nothing).
- *
- * THE BY-NAME ROUTE IS GONE, and with it the exception it forced. `lint` used to be the axis where
- * the DEBIT cited: a scenario carried `@lint=<static-check>`, the run cited nothing, and it was
- * matched BY NAME to EVERY row whose obligation named it. That is why the invariant had to be
- * written "every evidence observation posts to AT LEAST ONE account, never to none" — not *exactly*
- * one, which was the runtime property over-generalised. With both axes citing, EXACTLY ONE is true
- * universally, and it is the stronger claim: "at least one" is silent about a double-post, and a
- * double-post is a second copy of the same fact. `Posting` is total over the `EvidenceObservation`
- * union by construction: every variant yields a destination.
- *
- * POSTING IS NOT CLASSIFYING. This rule decides WHERE an entry lands, never what it reconciles TO.
- * A credit posts to its row whatever outcome it later earns — or none at all. The outcome rules
- * are the sibling concepts' (`qualityCheckReconciliation`, `scenarioReconciliation`).
- */
-import type { EvidenceObservation, RuntimeEvidenceObservation, GuardEvidenceObservation } from "./journal.js";
-/**
- * WHERE an entry lands — the posting destination, one variant per route canon names.
- *
- * EVERY `kind` NAMES A ROW, and matches `ScenarioKind` exactly, because each IS the row kind the
- * entry posts to. A fourth member used to sit here — a SET of rows resolved by name — and it was
- * the one destination that was not a row at all. It went with the by-name route (3F-2590), so the
- * type is now exactly the row kinds, on both axes.
- *
- * Named for the ROW, never `Account`: `account` is RETIRED vocabulary (the container re-term —
- * Evidence / Scenario / Quality-Check Reconciliation replaced trial-balance / account /
- * sub-account), kept only as the bookkeeping ROOT of the metaphor in canon's glossary.
- */
-export type Posting = 
-/** BY CITATION → the row of the one real scenario this credit's `@SCN` names. */
-{
+import type { EvidenceObservation, RuntimeEvidenceObservation, FitnessEvidenceObservation } from "./journal.js";
+export type Posting = {
     kind: "scenario";
     scnId: string;
-}
-/** BY CITATION → an INVENTED row: the credit's `@SCN` is one no scenario carries. */
- | {
+} | {
     kind: "phantom-scenario";
     scnId: string;
-}
-/**
- * → the SUSPENSE row: the entry names no row at all. `posted` carries WHICH of the three
- * routes brought it here — they are genuinely different facts with different remedies, and the
- * suspense row's items distinguish them (`broken` vs `cites-no-scenario`):
- *   - `broken`                   — a proof that NEVER RAN, so it names no test and cites
- *                                  nothing, WHATEVER `scnId` / `status` it structurally carries.
- *   - `cites-nothing`            — a runtime credit that RAN and carried no `@SCN`.
- *   - `no-evidence-obligation-static-check`  — a static check that ran with no `@lint` naming it.
- */
- | {
+} | {
     kind: "suspense-scenario";
     posted: "broken" | "cites-nothing" | "no-evidence-obligation-static-check";
 };
-/** The destinations a RUNTIME credit can reach — it is citation-routed, so never by name. */
 export type RuntimePosting = {
     kind: "scenario";
     scnId: string;
@@ -75,22 +19,6 @@ export type RuntimePosting = {
     kind: "suspense-scenario";
     posted: "broken" | "cites-nothing";
 };
-/**
- * The destinations a STATIC-CHECK credit can reach — the citation-routed ones when the observer
- * stamped an `@SCN` on it (@SCN-LNT-001), and suspense when the check named nobody or never ran.
- * Structurally `RuntimePosting`'s shape now that the by-name member is gone (3F-2590): one posting
- * rule over both axes. The two types stay APART because their SUSPENSE reasons still differ — a
- * runtime credit reaches suspense `broken` or `cites-nothing`, a fitness credit `broken` or
- * because no obligation names its check — and collapsing them would let a caller be handed a
- * reason its axis cannot produce. `cites-nothing` is the one this axis has never had: a converted
- * credit that cites nothing is a check nobody named, which is a different fault with a different
- * remedy.
- *
- * `broken` ARRIVES HERE AT @SCN-LNT-026 AND IS NOT A NEW CONCEPT, only a newly reachable one. The
- * outcome has meant a proof that never ran since @SCN-LDG-017; what changed is that the static
- * axis can now say it, because the CI run's own step record says whether the check ran and the
- * reader had been declining to look.
- */
 export type StaticCheckPosting = {
     kind: "scenario";
     scnId: string;
@@ -101,32 +29,7 @@ export type StaticCheckPosting = {
     kind: "suspense-scenario";
     posted: "broken" | "no-evidence-obligation-static-check";
 };
-/**
- * WHERE does this evidence observation post? THE posting rule, in one place.
- *
- * `scenarioIds` is the OBLIGATION side — which scenarios exist — already the model's own rule,
- * built once by the caller and passed rather than re-derived here, so the rule stays a pure
- * decision over prepared inputs and cannot disagree with the census that shares it. A second set
- * (the named static-check handles) stood beside it for the by-name route and went with it.
- *
- * ORDER IS LOAD-BEARING — the arms are checked exactly as canon fail-safes them, and ON BOTH
- * BRANCHES since @SCN-LNT-026, which is the point of saying it once here:
- *   1. `broken` FIRST, on the FLAG, never on `scnId` / `status` (@SCN-LDG-017). A proof that never
- *      ran cannot discharge or fail an obligation, so it must never be citation-routed — not to a
- *      real row, not to a phantom one. It structurally MAY carry an `scnId` and a `status`; both
- *      are ignored here. Checking `broken` after either would misfile it.
- *   2. an uncited credit (`scnId === null`, or absent on the static axis) → suspense, never phantom.
- *   3. a cited credit whose `@SCN` no scenario carries → phantom.
- *   4. otherwise → that scenario's row.
- *
- * The two branches differ only in what step 2's suspense reason is CALLED, because the two axes
- * reach it for different reasons: a runtime credit that ran and cited nothing, a static check no
- * obligation names. Steps 1, 3 and 4 are the same rule read twice.
- *
- * The overloads keep the two axes' destinations apart at the type level, so a caller that has
- * already narrowed the union cannot be handed a destination its axis can never reach.
- */
 export declare function postingOf(observation: RuntimeEvidenceObservation, scenarioIds: ReadonlySet<string>): RuntimePosting;
-export declare function postingOf(observation: GuardEvidenceObservation, scenarioIds: ReadonlySet<string>): StaticCheckPosting;
+export declare function postingOf(observation: FitnessEvidenceObservation, scenarioIds: ReadonlySet<string>): StaticCheckPosting;
 export declare function postingOf(observation: EvidenceObservation, scenarioIds: ReadonlySet<string>): Posting;
 //# sourceMappingURL=posting.d.ts.map

package/dist/domain/posting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posting.d.ts","sourceRoot":"","sources":["../../src/domain/posting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAEV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACzB,MAAM,cAAc,CAAC;AAMtB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,OAAO;AACjB,iFAAiF;AAC/E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACrC,qFAAqF;GACnF;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC7C;;;;;;;;GAQG;GACD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,eAAe,GAAG,qCAAqC,CAAA;CAAE,CAAC;AAE9G,6FAA6F;AAC7F,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,eAAe,CAAA;CAAE,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,qCAAqC,CAAA;CAAE,CAAC;AAE5F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,SAAS,CACvB,WAAW,EAAE,0BAA0B,EACvC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,cAAc,CAAC;AAClB,wBAAgB,SAAS,CACvB,WAAW,EAAE,wBAAwB,EACrC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,kBAAkB,CAAC;AACtB,wBAAgB,SAAS,CACvB,WAAW,EAAE,mBAAmB,EAChC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC"}
+{"version":3,"file":"posting.d.ts","sourceRoot":"","sources":["../../src/domain/posting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,OAAO,GACf;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,eAAe,GAAG,qCAAqC,CAAA;CAAE,CAAC;AAE9G,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,eAAe,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,qCAAqC,CAAA;CAAE,CAAC;AAE5F,wBAAgB,SAAS,CACvB,WAAW,EAAE,0BAA0B,EACvC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,cAAc,CAAC;AAClB,wBAAgB,SAAS,CACvB,WAAW,EAAE,0BAA0B,EACvC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,kBAAkB,CAAC;AACtB,wBAAgB,SAAS,CACvB,WAAW,EAAE,mBAAmB,EAChC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC"}